Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: yk3kNmNPx0h+56tmm/Rs2pAu46Wt5IsFFQVkwZwXPX4=
Subject key identifier: DF:3A:C0:20:12:49:DD:5B:1B:27:5A:63:18:DF:D7:7C:73:6C:F9:78
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 0194BD1746DE0191844889D904C24ACA0F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: MOoyYjpPSsO6W3JgxGW67G4jP/bNqCYEMbnH5VXhbfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:de:01:91:84:48:89:d9:04:c2:4a:ca:0f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=df3ac0201249dd5b1b275a6318dfd77c736cf978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:9f:c8:ca:9c:6e:31:42:d8:49:d6:8f:96:
3a:fe:7e:49:19:03:38:52:8d:ed:8b:34:e7:d7:c7:
dd:ae:3f:42:24:ee:0e:59:60:ea:49:f7:6f:95:1b:
11:9a:50:8d:f1:72:8b:1a:35:23:e5:88:3b:01:f1:
86:d6:10:aa:e1:26:29:3e:f4:7d:6a:97:9f:48:34:
c5:50:e7:20:0b:35:b1:03:1f:05:ff:e4:f0:5f:e1:
e9:40:7e:c9:e5:a7:5d:0d:7a:1e:9a:24:c8:aa:49:
dc:3f:4c:62:f1:13:82:9e:a4:a7:d6:fa:7d:7a:e9:
a6:5e:f9:1f:2b:75:ae:3d:1f:86:1b:e6:ef:6a:7e:
33:76:e5:4f:e0:4e:3e:07:a4:a7:1f:4a:a6:ba:27:
a1:5c:b6:1d:ec:1d:e1:88:e9:f3:14:bd:c8:ed:a9:
74:ec:29:bf:6d:75:d4:55:92:59:c9:ad:e4:fe:e9:
d0:b7:2c:7e:4d:72:2d:0f:25:f7:44:47:a8:64:d4:
f7:72:7b:b6:10:a8:75:60:8a:49:04:ac:2b:3c:f6:
b8:87:97:f2:ee:77:76:90:a2:15:73:3d:e5:8e:7d:
d1:2a:cd:d5:c9:46:e7:d9:70:cc:e4:04:09:7b:aa:
d8:91:cf:82:b6:36:6f:2f:6e:9d:88:28:ec:2a:3d:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3A:C0:20:12:49:DD:5B:1B:27:5A:63:18:DF:D7:7C:73:6C:F9:78
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:10:f2:0b:82:ce:34:5c:ef:19:0b:29:a1:1a:85:a6:a9:8a:
66:08:9c:bb:c3:cf:19:71:c2:ba:da:76:15:81:cd:d3:85:a2:
53:cf:71:94:7d:16:e9:c8:91:28:d9:2d:df:a5:a9:b5:36:26:
79:58:8e:f2:5f:80:c8:28:7c:01:53:04:42:cf:b2:d8:c2:0f:
e4:bb:dc:77:46:15:04:d6:b7:60:1e:19:15:d3:f3:8f:08:a5:
7e:13:ff:25:ba:8b:86:7b:f7:5d:07:38:89:7b:07:d2:ad:dd:
af:7d:35:42:da:d6:09:74:e2:75:98:1a:2f:f6:ef:97:02:db:
30:6e:73:55:f4:e0:2a:c2:46:0a:b1:e4:ce:91:e6:9b:81:50:
4a:48:3a:c4:60:d6:09:23:dc:bb:63:a3:55:2d:08:bd:9a:43:
50:41:ea:88:c9:e9:26:9f:84:80:35:83:15:7d:4c:9f:a6:70:
99:a1:4c:a2:59:ff:bd:06:fd:10:bb:5b:dc:9b:97:b7:50:5f:
bc:83:b8:75:eb:a1:59:a4:50:6d:fd:d3:6c:ff:32:7c:90:56:
dd:d6:54:60:3b:5b:6e:48:3f:9e:57:b2:6c:ba:ef:d3:56:74:
18:e4:cd:ef:d3:e1:22:36:b6:4c:f1:58:83:89:3e:8c:60:7f:
41:04:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:06 2025 by rpki-client